Privacy Policy
Lunadraw turns a child's drawing into a polished character they can keep and grow a library of, and into short illustrated bedtime stories. A parent or guardian holds the account; children draw within it but do not have their own accounts. This policy explains, in plain language, what we collect, how we use it, and the choices you have.
1. Information we collect about a child
The only information tied to a child is what you, the parent, provide or what the child creates:
- First name (you enter it).
- Age band (4–6, 7–9, or 10+).
- Avatar colour preference.
- Their drawings, characters, stories, generated images, and narration audio.
2. Information we do not collect about a child
We deliberately do not collect any of the following from a child:
- Last name or date of birth.
- Email address or phone number.
- Location.
- Photographs.
- Audio recordings of the child.
- Behavioural tracking or profiling beyond simple aggregate counts.
3. Information we collect about a parent
- Email address.
- A securely hashed password (we never store your password itself).
- OAuth subject identifiers if you sign in with Apple or Google.
- Billing receipts from the App Store, Play Store, or Stripe.
- IP address for your sessions, which we rotate and truncate.
- Push notification tokens, if you enable notifications.
- Your locale and marketing-email opt-in choice.
4. How we use this information
We use it only to run the service:
- To turn drawings into characters and to generate stories.
- To enforce our safety policies on every drawing and story.
- To manage your account, subscription, and notifications.
We do not use your or your child's data for advertising, for profiling children, or to train AI models — our providers are contractually set to "do not train" on the content we send them. We do not sell data to third parties.
5. Storage and security
Data is encrypted at rest. Backups are encrypted and kept for 30 days. Application logs are stripped of personal information before they are written. Connections use TLS.
6. How long we keep data
- Active account: kept while the account is active.
- Inactive account: after 365 days with no sign-in, we send a warning cycle and then delete it.
- Deleted account: a 14-day grace period, then permanent deletion.
- Safety logs: kept 365 days, then anonymised.
- Authentication audit logs: kept 90 days.
7. Children's privacy (COPPA)
The parent is the contracting party. A child does not have an account and does not transact. We collect the minimum needed — a first name and age band — and keep no chain of information that could re-identify a child. We do not run third-party analytics or advertising on children, ever.
8. Your export and deletion rights
You can export everything for a child as a PDF from the parent zone. You can delete an individual child or your whole account; deletion runs after a short grace period and then permanently removes the data. For data requests by email, we use the same export path. EU families have the full set of GDPR-K rights, with consent and contract as the lawful basis and no profiling or targeted advertising of children.
9. Third-party services
To create characters and stories we send content to image-generation and text-to-speech providers, which process it to return a result and do not retain it to train their models. We use an email provider to send you transactional messages. These providers act as processors on our behalf. If you use the optional "say it out loud" naming feature, speech is turned into text by your web browser, which may use its own online speech service to do so (for example, Chrome uses Google's). The audio is handled entirely by the browser under its own privacy policy — Lunadraw never receives, stores, or transmits audio, and we see only the resulting text, which is treated like any typed name.
10. Changes to this policy
If we make a material change, we will email you before it takes effect.
11. Contact
For privacy questions, or to reach our data protection officer, email privacy@lunadraw.app. For general support, email support@lunadraw.app.